{
  "cveId": "CVE-2022-1343",
  "url": "https://patchblox.com/security/cve/CVE-2022-1343",
  "summary": "CVE-2022-1343 is fixed in 8 products on 1 platform, first by libssl3 3.0.2-0ubuntu1.1, released May 2, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...",
  "description": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: c_rehash script allows command injection (CVE-2022-1292)\n\n* openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS (CVE-2022-1343)\n\n* openssl: OPENSSL_LH_flush() breaks reuse of memory (CVE-2022-1473)\n\n* openssl: the c_rehash script allows command injection (CVE-2022-2068)\n\n* openssl: AES OCB fails to encrypt some bytes (CVE-2022-2097)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* openssl occasionally sends internal error to gnutls when using FFDHE (BZ#2080323)\n\n* openssl req defaults to 3DES (BZ#2085499)\n\n* OpenSSL accepts custom elliptic curve parameters when p is large [rhel-9] (BZ#2085508)\n\n* OpenSSL mustn\u0027t work with ECDSA with explicit curve parameters in FIPS mode (BZ#2085521)\n\n* openssl s_server -groups secp256k1 in FIPS fails because X25519/X448 (BZ#2086554)\n\n* Converting FIPS power-on self test to KAT (BZ#2086866)\n\n* Small RSA keys work for some operations in FIPS mode (BZ#2091938)\n\n* FIPS provider doesn\u0027t block RSA encryption for key transport (BZ#2091977)\n\n* OpenSSL testsuite certificates expired (BZ#2095696)\n\n* [IBM 9.1 HW OPT] POWER10 performance enhancements for cryptography: OpenSSL (BZ#2103044)\n\n* [FIPS lab review] self-test (BZ#2112978)\n\n* [FIPS lab review] DH tuning (BZ#2115856)\n\n* [FIPS lab review] EC tuning (BZ#2115857)\n\n* [FIPS lab review] RSA tuning (BZ#2115858)\n\n* [FIPS lab review] RAND tuning (BZ#2115859)\n\n* [FIPS lab review] zeroization (BZ#2115861)\n\n* [FIPS lab review] HKDF limitations (BZ#2118388)",
  "published": "2022-05-02T17:00:00Z",
  "severity": "Moderate",
  "cvss": 5.3,
  "epss": 0.02158,
  "epssPercentile": 0.82301,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libssl3",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.2-0ubuntu1.1",
      "fix": "libssl3 3.0.2-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libssl3-3.0.2-0ubuntu1.1",
      "released": "2022-05-02T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl",
      "release": "RHEL 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "RHSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.0.2-0ubuntu1.1",
      "fix": "openssl 3.0.2-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-openssl-3.0.2-0ubuntu1.1",
      "released": "2022-05-02T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl",
      "release": "almalinux 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "ALSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl",
      "release": "ol 9",
      "fixedVersion": "2:3.0.1-41.0.1.ksplice1.el9_0",
      "fix": "ELSA-2022-9751",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9751",
      "released": "2022-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "RHSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "ALSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-devel",
      "release": "ol 9",
      "fixedVersion": "2:3.0.1-41.0.1.ksplice1.el9_0",
      "fix": "ELSA-2022-9751",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9751",
      "released": "2022-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "RHSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "ALSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-libs",
      "release": "ol 9",
      "fixedVersion": "2:3.0.1-41.0.1.ksplice1.el9_0",
      "fix": "ELSA-2022-9751",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9751",
      "released": "2022-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-perl",
      "release": "RHEL 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "RHSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-perl",
      "release": "almalinux 9",
      "fixedVersion": "1:3.0.1-41.el9_0",
      "fix": "ALSA-2022:6224",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-6224",
      "released": "2022-08-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-perl",
      "release": "amzn 2023",
      "fixedVersion": "1:3.0.5-1.amzn2023.0.4",
      "fix": "ALAS2023-2023-051",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-051",
      "released": "2023-02-17T20:45:00Z"
    },
    {
      "platform": "linux",
      "product": "openssl-perl",
      "release": "ol 9",
      "fixedVersion": "2:3.0.1-41.0.1.ksplice1.el9_0",
      "fix": "ELSA-2022-9751",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9751",
      "released": "2022-08-31T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}